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We claim: 

1 . A computerized method of creating test coverage for non-deterministic 
programs comprising: 

receiving a graph of edges and states representing a program under test; 
5 creating a continuous cycle of edges through the graph that reaches each edge in 

the graph at least once; 

splitting the continuous cycle into discrete sequences that end at edges reaching 
non-deterministic states in the graph; 

executing the program and verifying that the program conforms to the behavior 
1 0 represented by discrete sequences; 

determining untested program behavior as discrete sequences not reached by the 
program; 

creating strategies through the graph that have a higher probability of reaching 
discrete sequences not reached by the program; and 
1 5 executing the program under test conditions that cause the program to execute 

through states that correspond to the created strategies. 

2. The method of claim 1 wherein the received graph is a set of states and a 
set of edges, and edges are represented as state source-target pairs. 

3. The method of claim 1 wherein the continuous cycle of edges is created 
20 from the graph input using a Chinese Postman tour algorithm. 

4. The method of claim 1 wherein the graph states are received as a set of 
deterministic vertices and a set of non-deterministic vertices. 
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5. The method of claim 1 wherein the executing program is instrumented 
with executable code that verifies upon execution that a program state conforms to a 
state of the graph. 

6. The method of claim 1 wherein created strategies are inputs that 

5 represent edges between states of the graph, and test conditions cause the program to 
enter untested program behavior. 

7. A computer system comprising: 
memory and a central processing unit executing, 

a compiler for compiling an executable specification into an abstract 
state machine, 

a graphing program for creating a continuous cycle touching all edges of 
the abstract state machine, and for splitting the continuous cycle into discrete 
sequences that end at non-deterministic states; 

a strategy calculation program for creating strategies more likely to reach 
the imtouched discrete sequences; 

a coverage program for executing a program and verifying that the 
program executes states corresponding to those modeled by discrete sequences 
of the abstract state machine and for determining untouched discrete sequences 
and for executing the program according to the created strategies and verifying 
whether the program executes states corresponding to the untouched discrete 
sequences. 

8. The system of claim 7 wherein a continuous cycle is determined 
according to a Chinese Postman algorithm. 

9. The system of claim 7 wherein discrete sequences comprise beginning 
25 states reachable firom edges exiting non-deterministic states. 
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10. The system of claim 7 wherein an untouched discrete sequence is a state 
selectable from a program code executing at a remote computer. 

1 1 , The system of claim 7 wherein the abstract state machine comprises a 
graph of states and edges. 

5 12. The system of claim 1 1 wherein the strategy calculation program 

receives the graph and an edge probability function as input. 

13. The system of claim 7 wherein untouched discrete sequences represent 
less than 10% of the discrete sequences and all untouched discrete sequences are 
touched when the program is executed according to the created strategies. 

10 14. The system of claim 7 wherein not all untouched discrete sequences are 

verified when the program is executed according to the created strategies. 

15. A computer-readable medium having thereon computer-executable 
instructions comprising: 

instructions for modeling program behavior; 
1 5 instructions for verifjdng program behavior; 

instructions for sphtting a model of program behavior into sequences ending at 
non-deterministic behavior; 

instructions for determining strategies more likely to reach an identified program 
behavior; and 

20 instructions for causing a program to execute behavior corresponding to 

strategies more likely to reach the identified program behavior. 

16. The computer-readable medium of claim 15 wherein the modeled 
program behavior is modeled as an abstract state machine. 
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17. The computer-readable medium of claim 15 wherein the split sequences 
are represented as a sequence of edge transitions of an abstract state machine. 

18. The computer-readable medium of claim 15 wherein the non- 
deterministic behavior comprises commimications with a remote computer. 

5 19. The computer-readable medium of claim 15 wherein determined 

strategies are determined based on a comparison of edges exiting a deterministic state 
representing program behavior, and a selected edge has a highest probability of 
reaching a state representing the identified program behavior. 

20. The computer-readable medium of claim 15 wherein the instructions for 
10 verifying program behavior cause the program to execute code that verifies that the 
program is in an expected model state. 
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